Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File: CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier: Fi0OIxysmCaiEpg8Ieqiu4GtYs7NUGO6w0SWYWAYTXQ=
Subject key identifier: 66:42:15:6B:B1:56:F5:9C:98:5E:C2:B7:39:7C:7E:7D:1B:74:64:4D
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer: /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial: 01987450BA17002B1903047142C4C2517214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number: 12B2
Signing time: Mon 04 Aug 2025 09:01:44 +0000
Manifest this update: Mon 04 Aug 2025 09:01:44 +0000
Manifest next update: Tue 05 Aug 2025 09:01:44 +0000
Files and hashes: 1: 5gxr50rRC6q1xmQ2obCCI3UU8XE.roa (hash: 788tIYHaxcKJti3OU2hmplvQGAFcsSM5lvHfjYsQU8M=)
2: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: zWYNUuraovHXbIrPogzIyZ4Hvfel7yAMgi2qx4eS8as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:ba:17:00:2b:19:03:04:71:42:c4:c2:51:72:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Validity
Not Before: Aug 4 09:01:44 2025 GMT
Not After : Aug 5 09:01:44 2025 GMT
Subject: CN=6642156bb156f59c985ec2b7397c7e7d1b74644d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:ba:6f:53:a4:3e:cb:28:7b:35:8e:37:f3:
82:89:f1:89:4f:c1:e4:a8:98:4b:c2:0d:ae:c3:d9:
96:df:10:70:87:d5:3e:93:22:6f:b2:e1:89:b2:d6:
d8:61:ef:f4:ae:83:c9:6b:27:26:03:d1:e2:53:9f:
f4:5c:a2:2f:cd:4c:88:25:f2:bc:b2:8e:9e:08:20:
20:a9:43:ea:a2:eb:d1:81:38:a1:b8:af:03:32:17:
21:46:98:e8:61:4e:70:fb:bd:10:3c:23:a2:b6:15:
9f:24:e7:e3:75:cf:f2:86:04:4f:53:b1:53:16:a4:
18:15:f0:03:72:b4:91:3e:68:63:b2:b4:40:c3:8c:
53:5a:47:fc:61:34:d7:ad:50:57:e7:7f:76:39:01:
be:af:7e:8e:c1:a6:7f:f2:e2:77:f2:a4:a5:85:57:
f1:83:aa:16:68:ef:22:bd:db:15:10:b8:7f:6c:21:
ee:95:e9:33:a1:fa:3a:2d:28:33:96:5c:c5:35:cd:
76:16:2f:04:4e:86:7e:c8:ff:f9:e3:18:46:7f:f3:
c9:c6:b4:d6:69:0a:dc:fc:69:31:b1:9a:c2:b4:81:
d8:06:02:cd:72:b7:b4:74:be:bb:e7:86:ea:ba:90:
e6:1d:e6:14:70:36:16:f5:47:d3:d1:61:69:ce:35:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:15:6B:B1:56:F5:9C:98:5E:C2:B7:39:7C:7E:7D:1B:74:64:4D
X509v3 Authority Key Identifier:
keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:df:03:33:97:0a:65:44:c4:a3:cd:44:e7:01:f9:2d:2c:58:
09:86:48:cd:ac:4b:15:af:7f:d9:ea:19:11:27:e4:f2:d4:bf:
e9:29:ba:50:af:a5:09:72:42:94:7c:5b:2d:98:75:9e:4a:12:
a4:27:ed:ca:c3:a1:43:24:58:55:b0:d5:7b:8b:c8:13:7f:35:
6e:0c:8f:ad:2e:32:5b:b2:77:56:ef:9d:d3:9c:f8:21:6d:1d:
52:87:79:8b:bb:cc:26:a9:fa:8b:42:59:6b:6f:80:e1:11:5e:
7f:87:f3:1a:2f:a1:72:76:88:a4:b5:03:ea:93:20:80:d3:89:
4e:5c:81:d4:ae:60:d1:98:77:cd:30:73:fe:21:b9:eb:80:8f:
7a:6d:3e:06:82:8b:09:18:cb:42:da:aa:4b:20:96:ba:d8:63:
ea:9a:d7:e2:97:24:e9:29:55:b2:36:69:02:37:f5:08:19:2b:
cc:26:c0:ab:40:59:8f:b5:30:89:d2:68:07:d6:89:a1:83:71:
2f:05:4e:a3:be:18:15:0b:e8:97:31:26:b1:26:d8:02:a1:59:
ba:c3:69:4f:0d:0d:82:28:44:c2:d6:6e:e2:cd:cc:07:9b:eb:
84:90:d9:35:53:c7:b3:e8:b5:f5:c5:02:d2:3a:86:12:41:b2:
45:cb:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:24 2025 by rpki-client